Dates: Tuesday, 7, 14 and 21 November 2017 (3-day course)

Time: 9.00am to 5.00pm

Location: Glasgow

Cost: £1,395 per person 

​

Overview

​

The new General Data Protection Regulation will apply in the UK from 25 May 2018 and will require certain organisations to appoint a Data Protection Officer (DPO).  The role of the DPO is a complex one, and the DPO must have professional knowledge and experience of Data Protection law and advise and monitor its organisation’s compliance with the Regulation as well as training staff.  The DPO must also act as the point of contact with the regulator, the Information Commissioner’s Office (ICO), on Data Protection matters concerning its organisation. 

 

Our 3-day DPO course equips participants with the essential legal and technical knowledge and toolkit and an in-depth understanding of the Regulation to enable them to confidently perform their role as DPO going forward. 

 

The course is a practically focused ‘A to Z’ of the Regulation and looks at:

 

• new defined terms, including ‘personal data’, ‘data controller’, ‘data processor’, ‘data subject’ and ‘consent’;

• the new Data Protection principles – what is new and what remains the same;

• finding and documenting a legal basis under the Regulation to justify personal and sensitive personal data processing;

• collecting personal data by drafting compliant Data Protection statements;

• handling disclosures of personal data;

• data retention, anonymisation and developing a data retention schedule and policy;

• understanding data subjects’ new and enhanced rights under the Regulation and dealing with requests;

• developing and implementing an accountability framework;

• transferring personal data outside the European Economic Area;

• websites and online Data Protection issues;

• applying the exceptions from the Regulation;

• role of the DPO and engaging with others in the organisation;

• undertaking Data Protection audits and data mapping exercises;

• engaging with service providers and drafting compliant data processing clauses and contracts;

• drafting compliant policies, procedures and staff guidance materials;

• understanding privacy by design and completing Data Protection impact assessments of data processing activities;

• implementing effective organisational and technical data security measures and identifying, managing, containing and reporting data security breach incidents;

• understanding and managing employee Data Protection issues arising in the workplace;

• managing the data security issues associated with remote and mobile working, social media, bring your own device (BYOD), cloud computing and other new technologies;

• understanding the role of the ICO, liaising with the ICO and managing and responding to ICO complaints and investigations;

• risk management and how to ‘sell’ Data Protection within the organisation, push it up the corporate agenda and implement a ‘culture of compliance’;

• developing and implementing a Regulation compliance action plan;

• getting staff ‘Regulation ready’ through effective training; and

• keeping your knowledge of Data Protection law and best practice up-to-date.

 

The course is delivered in an interactive workshop style combined with practical ‘real life’ examples and is tailored to smaller numbers to facilitate learning and allow for interaction, discussion and sharing of best practice amongst delegates.

 

The course qualifies for 19.5 hours’ CPD and will be delivered at the 5-star Radisson Blu hotel within Glasgow city centre.  The hotel is located a few short steps away from Glasgow Central Railway Station and around 10 minutes’ walk from Glasgow Queen Street Railway Station.

 

The course fee includes:

 

• registration and participation in the 3-day course;

• course materials, including supporting guidance;

• ‘sit down’ lunches, snacks and refreshments throughout; and

• certificate of successful completion and attendance.

​​